Privacy Policy

DevNest ("we", "us", or "our") respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit https://devnest.tech, contact us, or use our services.

Personal data means information relating to an identified or identifiable natural person. We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

This policy concerns our own website and business operations. Where we process personal data on behalf of a client while providing software or hosting services, the applicable client agreement and data processing agreement may also govern that processing.

The data controller for the processing described in this policy is DevNest LLC, operating under the name DevNest.

Our country of establishment is Belgium. Our postal contact address is ([BUSINESS POSTAL ADDRESS]).

For privacy questions or requests relating to your personal data, contact info@devnest.tech.

If the legal entity, establishment details, or contact information change, this policy should be updated accordingly.

The information we collect depends on how you interact with our website and services. We aim to collect only information that is relevant to the purpose for which it is used.

• Contact information: your name, email address, company name, and other contact details you choose to provide.
• Enquiry information: the contents of messages, project briefs, service requests, and other communications you send us.
• Project information: requirements, feedback, files, and business information necessary to deliver agreed services.
• Technical information: IP address, browser type, device information, approximate location derived from technical data, and server logs where collected.
• Usage information: pages visited, interactions, referral information, and diagnostic events where applicable and lawfully collected.
• Business and transaction information: quotations, contracts, invoices, payment status, and related correspondence where applicable.

We may collect personal data directly from you when you contact us, request a quotation, enter into a contract, or communicate with our team.

Some technical information may be collected automatically by the website, hosting infrastructure, security systems, or other services we use.

We may receive information from service providers or business contacts when necessary for a legitimate business purpose and permitted by applicable law.

We do not intend to collect information that is unnecessary for the purposes described in this policy.

We process personal data only where an applicable legal basis permits us to do so. Depending on the circumstances, our legal basis may be the performance of a contract, steps taken at your request before entering a contract, compliance with a legal obligation, our legitimate interests, or your consent.

• Responding to enquiries and communicating with prospective clients.
• Preparing quotations, managing projects, and delivering contracted services.
• Managing billing, accounting, tax records, and other legal obligations.
• Maintaining website reliability, troubleshooting errors, and protecting our systems against abuse or security incidents.
• Understanding website usage and improving our services where the relevant processing is lawful.
• Sending marketing communications where permitted by law and respecting applicable opt-out and objection rights.
• Establishing, exercising, or defending legal claims where necessary.

The GDPR requires a valid legal basis for processing personal data within its scope. The basis depends on the specific purpose and circumstances.

• Contract: processing necessary to provide a service or take steps you request before entering into a contract.
• Legal obligation: processing required by applicable accounting, tax, or other laws.
• Legitimate interests: processing for purposes such as business administration, proportionate security measures, or handling relevant business enquiries, provided your rights and interests do not override those interests.
• Consent: processing based on your freely given, specific, informed, and unambiguous agreement where consent is required.

Cookies and similar technologies may be used to support essential website functions, remember preferences, measure usage, or provide other functionality.

Strictly necessary technologies may be used where permitted by law. Where consent is legally required for analytics, advertising, or other non-essential technologies, those technologies should not be activated before the required consent is obtained.

You may be able to manage cookies through our consent controls and your browser settings. Disabling certain cookies may affect website functionality.

The exact cookies, providers, purposes, lifetimes, and consent choices must be documented in a cookie notice or consent interface that reflects the technologies actually deployed on this website.

This policy does not currently declare the use of analytics tools. If analytics are added, update this section and the cookie information to identify the tools, data collected, purposes, legal basis, and any consent requirements.

Analytics should be configured to collect only the information necessary for the intended purpose. Where consent is required, it must be obtained before the relevant tracking begins.

We do not sell personal data to third parties. We may share personal data where necessary for the purposes described in this policy, subject to applicable law.

• Hosting and infrastructure providers that operate our website or systems.
• Email and communications providers used to receive and respond to enquiries.
• Project tools, cloud storage, development platforms, and software providers where needed for our operations or an agreed service.
• Professional advisers, accountants, insurers, or legal representatives where appropriate.
• Public authorities, courts, or other parties where disclosure is required by law or necessary to establish, exercise, or defend legal claims.

Some providers process personal data on our behalf. Where data protection law requires it, we put appropriate contractual safeguards in place and assess the provider's role and security measures.

Providers may process data only in accordance with the applicable instructions and agreements where they act as our processors. Some providers may instead act as independent controllers for particular activities.

We should maintain an up-to-date internal list of providers, their purposes, locations, and relevant data protection arrangements.

Some providers may store or process personal data outside the European Economic Area (EEA). Where personal data is transferred internationally, we apply the safeguards required by applicable data protection law.

Depending on the circumstances, these safeguards may include an adequacy decision, approved standard contractual clauses, and supplementary measures where required.

The countries involved, relevant providers, and applicable transfer safeguards should be identified when such transfers occur.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations and the need to establish, exercise, or defend legal claims.

• Enquiries: for the period necessary to respond and manage the resulting business relationship.
• Client and project records: for the duration of the engagement and any additional period reasonably required for contractual, legal, or dispute-related purposes.
• Accounting and tax records: for the period required by applicable law.
• Technical and security logs: for a period appropriate to operational security, troubleshooting, and applicable legal requirements.
• Consent records: for as long as necessary to demonstrate and manage the relevant consent.

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, and destruction.

Depending on the systems and risks involved, measures may include access controls, restricted permissions, secure transmission, software updates, backups, and monitoring.

No website, transmission method, or storage system can be guaranteed to be completely secure. We assess and respond to security incidents in accordance with applicable legal requirements.

Depending on the circumstances and applicable law, you may have the right to access your personal data, request correction, request erasure, restrict processing, receive certain data in a portable format, or object to processing.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

These rights are subject to legal conditions and exceptions. For example, we may need to retain certain information to comply with legal obligations or defend legal claims.

To exercise a right, contact us using the details in this policy. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

We may send business updates or marketing communications where permitted by applicable law. Where prior consent is required, we will obtain it before sending the relevant communications.

You can opt out of marketing emails by using the unsubscribe mechanism provided or contacting us directly. We may still send non-marketing communications needed to administer a contract or respond to a request.

Our website and services are intended primarily for businesses and people seeking software development services. We do not knowingly collect personal data from children in circumstances where doing so would be unlawful.

If you believe a child has provided personal data to us inappropriately, contact us so we can assess the situation and take appropriate action.

Our website may link to third-party websites, services, or platforms. Those third parties operate under their own privacy policies and practices.

We are not responsible for the privacy practices of external websites. Review their policies before providing them with personal data.

When delivering software, hosting, integrations, or other services, we may process personal data that a client controls. In those situations, the client may be the controller and DevNest may act as a processor, depending on the actual activities and legal roles.

The relevant parties must determine their roles based on the processing performed. Where required, a data processing agreement must describe the subject matter, duration, nature and purpose of processing, types of personal data, categories of data subjects, and applicable obligations.

Clients are responsible for ensuring that they have a lawful basis and any required notices or permissions for personal data they provide, subject to the responsibilities assigned to each party by law and contract.

If you have concerns about how we handle your personal data, please contact us first so we can review your concern.

Where the GDPR applies, you may also have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the EU country where you live, work, or where the alleged infringement occurred.

In Belgium, the supervisory authority is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données). Its official website is https://www.dataprotectionauthority.be/.

We may update this Privacy Policy to reflect changes in our services, systems, legal obligations, or data practices.

The updated policy will be published on this page with a revised last-updated date. Where applicable law requires additional notice or consent for a material change, we will take the required steps.

For questions about this Privacy Policy or our handling of personal data, contact DevNest.

Email: info@devnest.tech

Postal address: ([BUSINESS POSTAL ADDRESS])

Website: https://devnest.tech